Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E930869676F511F1997135FFCE1D38B0.roa
File: E930869676F511F1997135FFCE1D38B0.roa (raw, json)
Hash identifier: FACJKRlyHUJM42aJP8jd7AvRaWjscEouSc3qHqbztso=
Subject key identifier: AE:ED:CB:8C:62:59:13:E7:92:7B:49:54:ED:42:12:B8:6C:E7:5D:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E930869676F511F1997135FFCE1D38B0.roa
Signing time: Fri 03 Jul 2026 15:43:18 +0000
ROA not before: Fri 03 Jul 2026 15:43:13 +0000
ROA not after: Mon 10 Aug 2026 15:43:13 +0000
asID: 138915
IP address blocks: 154.223.44.0/24 maxlen: 24
154.223.45.0/24 maxlen: 24
154.223.46.0/24 maxlen: 24
154.223.47.0/24 maxlen: 24
154.223.48.0/24 maxlen: 24
154.223.49.0/24 maxlen: 24
154.223.51.0/24 maxlen: 24
154.223.52.0/23 maxlen: 24
154.223.54.0/23 maxlen: 24
154.223.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120518 (0x1d6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 15:43:13 2026 GMT
Not After : Aug 10 15:43:13 2026 GMT
Subject: CN=6a47d896-aeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:bd:76:89:19:d2:22:0e:2b:71:d5:d7:d5:
d7:93:15:10:51:cb:85:b3:ba:87:e6:cd:f6:7c:4d:
b9:e7:b9:3d:53:38:a3:87:6e:cf:75:8c:e4:b7:5a:
59:1a:a9:2b:d8:7c:03:1f:57:60:17:e0:2b:1e:94:
39:c1:9f:30:a9:17:0d:8a:84:f1:1a:a5:49:82:eb:
fe:71:3f:84:e4:f7:8e:09:50:65:c6:8f:25:fe:5e:
6b:94:67:47:99:88:a5:60:c6:ca:35:50:08:f0:ae:
31:6a:1e:de:d4:fd:58:32:25:3d:91:c8:8f:bb:ba:
df:97:e8:e9:d8:49:3c:96:f3:95:36:d4:9e:c7:0b:
fd:15:1d:bd:69:1c:a5:97:0a:31:38:38:ed:5f:a6:
3e:66:e7:5b:87:19:1e:ea:b8:ad:ec:91:0f:d7:06:
08:17:7b:05:8e:ab:b8:f4:ab:64:bc:b3:bb:11:a4:
2d:63:4b:4b:a0:d9:ee:c9:c4:08:f7:f9:b9:2a:c7:
fc:31:56:d0:b0:e0:2e:ce:3b:64:25:03:fe:3c:13:
5a:36:9a:00:ff:05:55:3f:b7:79:b5:c5:5e:78:45:
bc:e3:20:8b:9d:95:81:e1:cc:b3:85:97:7b:08:12:
a0:82:0b:a3:50:be:93:0b:40:62:ae:b6:25:44:81:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:CB:8C:62:59:13:E7:92:7B:49:54:ED:42:12:B8:6C:E7:5D:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E930869676F511F1997135FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.44.0-154.223.49.255
154.223.51.0-154.223.57.255
Signature Algorithm: sha256WithRSAEncryption
6d:9e:dc:bc:21:13:f7:76:9e:78:51:51:eb:bd:c6:bb:d6:e6:
dc:9b:6b:76:a7:2c:4e:15:60:6d:81:c7:b6:48:53:a3:ef:26:
32:26:27:64:49:fe:94:49:14:ea:01:0e:63:da:0e:b5:88:72:
f6:bc:1d:0b:85:75:a8:6d:6b:80:4b:5b:b5:39:13:af:7c:a5:
b2:4e:eb:0b:7d:56:b5:e7:52:46:d5:83:75:9e:6c:39:34:fc:
15:1e:b2:b6:bd:c1:5b:e1:39:fe:1b:f2:8f:c5:49:15:9b:36:
f7:36:3f:7c:25:40:f3:01:33:07:e8:1d:9b:36:8b:93:a1:ea:
95:ae:47:b7:e8:f7:8c:40:3b:40:c5:0c:1a:c7:4b:0c:5e:61:
9f:6c:31:1d:c6:24:5a:60:08:82:29:4e:e5:76:04:5f:9b:35:
77:12:8c:8d:f1:2b:23:49:9e:1a:da:54:38:e7:50:2e:97:1f:
38:49:32:07:1a:36:b2:46:69:28:6c:0e:6d:f3:f5:fb:9e:1c:
9b:81:b5:94:21:50:76:60:5b:ef:c2:25:2e:11:23:e4:3a:b8:
38:8b:e3:6b:aa:ab:63:c7:a8:bd:84:c2:94:60:08:a6:2c:1a:
e1:03:f3:79:2c:c8:01:39:12:44:14:20:d7:4b:be:ec:26:42:
7d:11:62:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:34:50 2026 by rpki-client